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Disclosure Text (1) : 

Disclosed is a method to improve internet privacy by rendering HTTP cookies useless. 
A 1 cookie 1 is a data object containing application -generated arbitrary content that 
is carried in the HTTP header. A cookie is generated by the server application and 
sent to the client. Cookies are categorized as temporary or permanent. A client 
returns a temporary cookie on its next post without storing it locally. A client is 
supposed to store a permanent cookie and return it upon request by the application, 
which could be during a future session. Some browsers offer the user several options 
with regard to cookies . Netscape (v5) offers the binary choice of accepting cookies 
or not. Microsoft Internet Explorer v5 offers fine-grained control: all cookies , no 
cookies from anybody, no cookies from a list of restricted sites, or prompting for 
eacn cookie . Cookies can be put to many uses. Some uses benefit users and some 
benefit advertisers. Here are a few examples: An application uses cookies to 
remember which items the online shopper has placed in his/her shopping cart, but 
only for the duration of the shopping session. A server delivering customised 
advertising content uses permanent cookies to remember which ads were displayed to 
the user during the past two weeks. By remembering this, the server can deliver new 
advertisements that the user has not seen recently. 
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A particular embodiment of the state information is described below in order to 
provide an example according to the present invention. It will be appreciated that 
alternative formats may be used in accordance with the principles of the present 
invention. As stated above, the extension to the HTTP protocol adds a new piece of 
state information to the HTTP header as part of an HTTP response from a Web server. 
Typically, the state information is generated by a common gateway interface ("CGI") 
script. The state information is stored by the receiving client system in the form 
of a " cookie list " for later use. The syntax of the new data, in one embodiment, is: 
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When a client system that implements the present invention wishes to send an http 
request to a particular Web server, the client system first examines its cookie list 
to see if the cookie list contains any matching cookies that need to be sent to the 
particular Web server. Specifically, before the client sends an http request to a 
Web server, the client compares the URL of the requested Web document against all of 
the stored cookies. If any of the cookies in the cookie list matches the requested 
URL then information containing the name/value pairs of the matching cookies will be 
sent along with the HTTP request. The format of the line is: 
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